zimbraSambaPassword Extension
Updated for 7.x! Pure Java now!
Server extension to compute the samba NT and LM hashes and keep them in sync with the Zimbra user password when it is changed.
Requirements
- ZCS up to 7.2
- Working Samba 3.x + LDAP
- zimbra_posixaccount and zimbra_samba admin extension installed
Installation and Configuration
- As root, create the /opt/zimbra/lib/ext/sambapassword directory
- As root, copy zimbraSambaPassword.jar into /opt/zimbra/lib/ext/sambapassword/
- Restart Zimbra
At the end execute as zimbra user:
zmprov md example.com zimbraPasswordChangeListener SambaPassword
Note: Follow the links below to download working copies for ZCS 7.2 of the famous admin extensions zimbra_posixaccount and zimbra_samba
Useful Links
| Downloads: | 2,915 |
|---|---|
| Latest Version: | 1.0 |
| Categories: | Utilities |
| Compatibility: | ZCS 5.0 or later, ZCS 7.0 or later |
| License: | AL |
| Created: | March 10, 2008 |
| Updated: | November 18, 2012 |
Reviews
I'm moving my whole company (approx 350 windows clients) over to LDAP and Samba and couldn't find a clean way to change the NT password. As we use Zimbra (since early v4) this is the perfect way to do it. Users now have a 'web' interface to change (all) their password for both Samba and Zimbra. All other solutions presume that your running Samba as a domain controller which we don't and don't want to.
Thanks.
P.S. The ReadMe mentions avioding the mkntpwd in favour of a pure Java implementation. Maybe this python code snippet will help
>>> import hashlib>>> nt_password = hashlib.new('md4', 'test'.encode('utf-16le')).hexdigest()>>> nt_password'0cb6948805f797bf2a82807973b89537'
Hi Tim
Yes, I agree with you: it's not a pure java implementation.
It simply was a (maybe better?) follow-up of my previous post on Zimbra Forums.
If anyone is interested I can recode it in a pure java way.
Thank you
by amessina on March 27, 2011
Hi,
When I install the zimbraSambaPassword extension, how can I specify the url of my external active directory to synchronized the passwords??
Thanks, excellent zimlet :D
Hi,
There's no needs to do it in the zimlet.
You have to enter your external AD server as usually in Zimbra. That's all.
Thanks a lot.
by amessina on March 27, 2011
Hi,
I installed it, but when change password on webUI I have an eror Invalid attribute name.
I using Zimbra OpenSource 7.1.2_GA
Thanks, zimlet
Hy nyu,
it was developed for zcs 5.x.
I'll start coding and tests for 7.x soon
Thanks
by amessina on March 19, 2012
Hello amessina, I've installed your extension on 7.1.4 and I broke authentication successfully... I'm reversing manual README instructions, but I don't know how to reverse "zmprov modifyConfig zimbraPasswordChangeListener sambapassword".
I hope you can code the new version soon!!!
Add a Review
Please log in to post review/comments.